Privacy Policy

1. Introduction & Scope

Acxelerate India ("we", "our", "us", or "the Platform") is a premier global readiness, cross-border expansion, and professional development advisory platform. We empower micro, small, and medium enterprises (MSMEs), high-growth startups, working professionals, higher education universities, and ambitious students to successfully navigate international markets, institutional collaborations, and global career pathways.

We are firmly committed to safeguarding the privacy, confidentiality, and integrity of the personal and institutional data entrusted to us. This Privacy Policy details our practices regarding the collection, handling, storage, protection, and disclosure of data when you visit our website, submit stakeholder inquiry forms, book consultation sessions, or access our aggregated Knowledge Centre intelligence feeds.

Our data handling practices comply with the applicable provisions of India's Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 (DPDP Act), and international principles of data fairness (including GDPR-aligned protections where cross-border trade delegation participants are concerned).

2. Information We Collect

We collect information only when it is voluntarily provided by you to fulfill a specific consultation, readiness assessment, or advisory request, as well as limited technical telemetry generated during website visits.

A. Direct Stakeholder Inquiry Forms

Depending on whether you engage as a Student, Working Professional, Startup Founder, MSME Executive, or University Representative, we may collect:

• Identity & Contact Details: Full name, official email address, mobile/WhatsApp telephone number, country code, city, state/province, and country of residence.
• Organizational & Professional Profile: Organization, company, or university name; current designation or student status; industry sector; LinkedIn profile URL; and website URL.
• Global Readiness Information: Target expansion countries or study destinations, key organizational challenges, desired consulting focus (e.g., market entry, cross-border mentorship, delegation participation, curriculum internationalization).
• Supporting Documents: Resumes/CVs (for mentorship or career benchmarking), pitch decks (for startup expansion assessments), or institutional briefs. All document uploads undergo rigorous binary verification and are stored in isolated, non-public directories.

B. Technical & Operational Telemetry

To preserve platform security, prevent distributed denial-of-service (DDoS) events, and manage rate limiting:

• Network Identifiers: Internet Protocol (IP) address, approximate geographic location (country/city level), browser type, and operating system.
• Request Logs: Timestamps of form submissions, page views, and API proxy queries. Our application logs are strictly scrubbed of passwords, credentials, and sensitive personal values.

3. Purpose & Legal Basis for Processing

We process your personal and business data strictly on lawful grounds, including your explicit consent, the necessity to perform or prepare an advisory contract, and our legitimate interest in securing our digital infrastructure:

• Fulfilling Advisory & Assessment Requests: Reviewing your organizational profile or career background to prepare diagnostic evaluations, customized market entry roadmaps, or mentorship pairings.
• Consultation Facilitation: Scheduling, calendar coordination, and meeting link generation for one-on-one virtual strategy sessions.
• Stakeholder Communications: Sending transactional confirmations, assessment findings, announcement notifications, or responding to direct inquiries.
• Security & Abuse Prevention: Enforcing automated rate limiting on public endpoints to thwart automated spam, fraudulent submissions, and malicious tampering.

4. Consultation Booking & Strategy Sessions

When you book a strategy consultation session through our platform:

• Information provided in the consultation booking form (including your key challenges, annual turnover/scale, and target markets) is treated as strictly confidential.
• Advisory notes generated during consultations are retained solely to provide continuous support and will not be shared with external third parties without prior written consent.
• All video conferences are conducted through secure, industry-standard encrypted communication platforms (such as Google Meet, Zoom, or Microsoft Teams).

5. Data Sharing, Disclosures & Cross-Border Transfers

We restrict data sharing to vetted, essential operational partners necessary to deliver our services:

• Cloud Infrastructure Providers: Secure database and hosting providers hosting our servers under strict non-disclosure and security standards.
• Transactional Email Services: Secure SMTP gateways used solely to deliver administrative emails, inquiry acknowledgments, and consultation confirmations.
• Institutional Partners (Upon Explicit Request): Where you explicitly register for cross-border trade delegations, overseas university immersions, or MentorCruise programs, necessary registration credentials may be securely transferred to accredited host institutions or mentors.
• Legal & Regulatory Compliance: We may disclose information only if mandated by a valid court order, government subpoena, or applicable statutory law in India.

6. Security Measures & Technical Safeguards

We employ enterprise-grade DevSecOps controls to protect your data against accidental loss, unauthorized access, destruction, or disclosure:

• Transport Layer Security (TLS/HTTPS): All data in transit is encrypted using modern TLS cryptographic protocols.
• Injection Protection: All database operations utilize parameterized queries through connection pools, preventing SQL and NoSQL injection vectors.
• Authentication Hardening: Administrative operations enforce constant-time cryptographic token verification (crypto.timingSafeEqual) to prevent timing side-channel attacks.
• Binary Upload Validation: Uploaded documents are checked against binary magic-byte signatures and extension whitelists, preventing polyglot executable uploads.
• Rate Limiting & HTTP Headers: Multi-tiered rate limiters and strict HTTP security headers (Helmet CSP, HSTS, X-Content-Type-Options: nosniff, frame restrictions) defend against cross-site scripting and framing attacks.

7. Data Retention & Storage

We retain inquiry submissions and consultation records only for as long as necessary to fulfill the business advisory relationship, maintain operational records, and satisfy statutory audit obligations. If you wish to have your submitted inquiry or contact records permanently removed from our active database, you may submit an erasure request at any time.

8. Your Legal Data Protection Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP) and international privacy standards, you enjoy comprehensive rights over your personal data:

• Right to Access: You may request a summary of the personal information we hold about you and how it has been processed.
• Right to Correction & Updation: You may request that incomplete, inaccurate, or outdated personal data be corrected.
• Right to Erasure ("Right to be Forgotten"): You may request that your personal data be purged from our active databases, subject to statutory retention mandates.
• Right to Withdraw Consent: Where processing is predicated on consent, you may revoke your consent at any time without retroactive penalty.
• Right to Grievance Redressal: You have the right to register concerns or complaints directly with our designated Grievance Officer.

9. Cookies & Tracking Technologies

Our website utilizes minimal, essential cookies and local browser storage to facilitate responsive layout rendering, secure form submission integrity, and anti-tampering verification. We do not engage in cross-site behavioral tracking or intrusive ad-targeting networks. For comprehensive details, please review our dedicated Cookie Policy.

10. Minors & Student Inquiries

Our advisory services are tailored toward adult professionals, entrepreneurs, and higher-education university students. We do not knowingly solicit or collect personal identifiable information from children under the age of 18 without verifiable parental or institutional guardian consent. If you believe a minor has submitted personal data without authorization, please notify us immediately for swift deletion.

11. Grievance Officer & Privacy Contact

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the contact details of our designated Grievance & Data Protection Officer are provided below. We commit to acknowledging inquiries within 48 hours and resolving grievances within 30 calendar days: